Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File: HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier: D2aL90vc74piL0yKjlrwelZFsS/UXzlg8tXQ0nUnP3o=
Subject key identifier: B6:5A:A8:53:B0:15:3E:B2:BB:DF:16:CD:64:DA:BF:08:75:C7:F3:C1
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 01969296369A8026BE8E45B621CF16C2CC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number: 1522
Signing time: Fri 02 May 2025 20:00:39 +0000
Manifest this update: Fri 02 May 2025 20:00:39 +0000
Manifest next update: Sat 03 May 2025 20:00:39 +0000
Files and hashes: 1: 2Sogz2f-Y-Q89kALOaFwXGpENls.roa (hash: xWX/sBmx7Cmqhctcmi5B9YqU1V0kQKRLbrhmA5MXJ0s=)
2: AAZYcUjhuGAJA3sXjywaEslf598.roa (hash: RBp9easJVYqUVgaIiMMNSM2ioBAAirvckRHOuxL4X0g=)
3: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: JYIVm2+s/2O853debdXscfK0hoQVA7x1NhrWcXhfeq4=)
4: KX2FVoJMwagFqXSqm7WmM6GiAdc.roa (hash: kL6N1Ap9alUNCwv0399F2Foe8bxiyXhyi55mwtllJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:96:36:9a:80:26:be:8e:45:b6:21:cf:16:c2:cc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: May 2 20:00:39 2025 GMT
Not After : May 3 20:00:39 2025 GMT
Subject: CN=b65aa853b0153eb2bbdf16cd64dabf0875c7f3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:30:89:dd:ab:34:c7:12:ce:44:81:d9:95:
f6:f9:ae:7e:84:d4:22:b8:23:f8:c8:cc:8a:5f:98:
8f:eb:f7:4c:2f:f7:3e:05:d5:1c:33:11:2c:0c:9b:
c2:ab:0c:1b:f0:ce:4b:0d:b5:fb:cf:45:fe:d7:e2:
c3:2a:4d:79:1f:a7:91:a7:79:9c:dc:cc:f6:7e:f1:
bd:27:dd:0d:a2:fe:17:93:68:8e:eb:39:a6:d3:b9:
c9:77:64:31:a1:70:23:84:2a:46:58:9e:0b:71:37:
29:ef:51:c4:dd:4b:02:d2:ff:9e:9d:9d:86:67:af:
25:65:ab:73:c2:20:9d:45:25:f8:9e:20:58:7f:bd:
7c:e0:2c:5f:3e:1b:a0:64:32:29:8e:f7:72:8c:52:
93:e3:09:77:38:ca:6b:f9:05:14:c3:44:0a:53:75:
d8:98:8d:36:0f:9d:d5:cc:81:eb:0a:60:99:98:3d:
00:11:b1:bb:32:4b:57:86:c6:70:f4:05:3e:ae:74:
97:15:4a:9f:4d:6c:67:c9:f9:10:ff:e7:31:36:1b:
2e:0e:62:28:31:95:91:67:ed:19:33:0c:a1:e5:ed:
a0:f8:bb:7a:2f:90:25:af:47:b9:04:23:28:18:78:
4a:8f:a6:59:0e:87:06:78:b7:c3:9e:83:f0:a4:39:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:A8:53:B0:15:3E:B2:BB:DF:16:CD:64:DA:BF:08:75:C7:F3:C1
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2d:3f:a3:6b:be:18:c9:30:de:49:40:05:f1:79:7f:e6:5f:
06:8e:c9:0e:c6:92:9c:90:af:fb:7b:24:d8:9c:3a:4d:96:ce:
7e:f5:74:ca:fb:6f:d0:e3:0f:16:22:fd:bc:74:ea:27:de:47:
50:0a:a5:87:60:f5:b2:db:2d:46:c3:0a:0a:cd:b1:af:58:4b:
e8:58:29:83:b4:9e:6a:e8:98:e4:45:16:dd:b2:08:a4:e1:64:
fb:a2:0c:0d:88:e8:e5:cb:d7:c8:02:7f:02:9b:c4:ef:61:19:
9b:e2:2e:54:ae:70:05:b9:d1:a8:6c:2d:ef:bb:3d:d8:67:a3:
78:49:a6:b6:cf:c8:79:06:4b:ef:be:bd:62:5f:21:2c:72:73:
b4:1d:50:8d:ed:7d:7c:e9:17:78:eb:ca:a9:7e:51:ba:c3:d7:
db:1f:fd:8d:d5:72:c1:ac:3e:4e:06:1f:4d:20:84:33:92:d6:
4c:8f:51:a8:3f:f9:e7:d1:6f:cb:c1:07:66:5d:23:71:c8:2f:
d8:f0:7d:b9:68:ed:24:f3:a2:28:ae:ff:75:41:ba:1c:3c:d1:
30:40:20:e9:55:92:1c:b1:35:ba:d2:3b:79:29:cc:52:2a:fe:
4e:10:d1:f2:53:86:48:d9:cb:89:51:7b:11:01:3c:e8:7c:61:
c7:9f:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:48:17 2025 by rpki-client